UnSent is the app you open instead of texting someone you're trying to stay no contact with. It's built to be private by default — most of what you write never leaves your phone. This page explains, plainly, the little that does.
• Your journal entries, streak, reasons, check-ins, and settings live on your device — we don't store or read them.
• We collect anonymous usage analytics (which screens and features get used) to improve the app — never the content of what you write.
• We don't sell your data, run ads, or share it with advertisers. There are no third-party ad or tracking SDKs.
UnSent (“we,” “us,” “the app”) is an independently developed app. Where this policy refers to a “data controller,” it means us. You can reach us any time at xuzitong333@gmail.com.
Your account (Sign in with Apple). If you sign in, Apple gives us a private, app-specific identifier for you — and, only if you choose to share them, a name and a relay email address. We use this solely to recognize your account. We never receive your Apple password.
What you create in the app. Your journal entries, no-contact start date, streak and milestones, the reasons you listed, urges you logged, check-ins, and your preferences are stored locally on your device. It stays on your phone and we cannot see it. Because it is ordinary app data, it is included in your own iPhone backup (iCloud or your computer) if you use one — that backup belongs to you and your Apple account, not to us, and it is how your streak survives getting a new phone. We have no access to it.
Usage analytics. To understand what's working, we collect anonymous product-analytics events — for example, that an onboarding step was completed, a screen was viewed, or a feature was tapped. These events are pseudonymous and do not include the text of your journal, your reasons, or your messages. This is processed by PostHog on our behalf.
The AI coach (not currently enabled). The coach is turned off in the current version, and nothing you write is sent anywhere for it. If a future version enables it, your message would be transmitted to our AI provider (Anthropic) to generate a reply and returned to you; we would never use those conversations to train models, and it would stay optional.
Reminders and notifications. Reminders are scheduled locally on your device. Turning them on doesn't send your data anywhere; the app simply asks iOS to notify you at the times you chose.
Optional cloud sync. If a future version offers syncing your progress across devices and you turn it on, your saved state is transmitted to our backend so it can be restored. This is off unless you enable it.
We keep this list short on purpose. These are the only processors involved:
| Service | Purpose | What it sees |
|---|---|---|
| Apple | Sign in with Apple | Your app-specific ID (name/email only if you share them) |
| PostHog | Anonymous product analytics | Pseudonymous usage events — not your written content |
| Anthropic | AI coach replies — not enabled in the current version | Nothing today; the messages you send the coach, if it is ever turned on |
Each processes data under its own privacy terms and only to provide these functions.
You can delete your account and everything in it from inside the app: Settings → Delete account. It asks you to confirm, then permanently erases your account together with your streak, your letters, your reasons, your check-ins and your settings from this device, and unlinks you from any further analytics. Nothing is kept in a hidden copy — there is no server-side account to keep. It cannot be undone. Deleting the app itself also removes your entries; note that if you restore an old device backup afterwards, that backup may still contain the data it held when it was made.
Analytics events are retained only as long as needed to understand product trends. If you would like us to delete anything else associated with you, email xuzitong333@gmail.com and we'll take care of it.
Depending on where you live (for example under GDPR or the CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. We honor these requests wherever you are — just write to us at the address above.
We use industry-standard measures to protect data in transit and at rest, and we keep the amount of personal data we handle deliberately small. No method of transmission or storage is ever 100% secure, but minimizing what we collect is our first line of defense.
UnSent is not directed to children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has provided us information, contact us and we'll delete it.
Our service providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers.
If we make material changes, we'll update the date at the top and, where appropriate, let you know in the app. Continuing to use UnSent after an update means you accept the revised policy.
Questions, requests, or concerns about privacy? Email xuzitong333@gmail.com. We read every message.